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1 REAL TIME DEBUGGER INTERFACE FOR EMBEDDED SYSTEMS 

2 

3 Thi s application is a continuation of U.S. Serial No. 

4 09/064,474, filed April 22, 1998, which is hereby incorporated by 

5 reference herein in its entirety. 
6 

7 BACKGROUND OF THE INVENTION 

8 . 

9 1. Field of the Invention 

p The invention relates to systems and methods for debugging 

software in real time. More particularly, the invention relates 

ft£ to systems and methods for the real time debugging of firmware in 

p|B embedded systems, e.g. ASIC chips having one or more processors on 

!T4 a single chip, 
ft 

Ho 2. State of the Art 

JH7 Software debugging may be accomplished in a number of ways, 

18 some of which are not performed in real time. A traditional 

1 9 debugging technique is to step through program instructions at a 

20 rate much slower than the rate at which the program is designed to 

21 run in real time. By stepping through the program instructions 

22 one-by-one, errors can be observed as they happen and the program 

23 code lines executed immediately prior to the error can be analyzed 

24 to find the cause of the error. This technique is not helpful, 
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1 however, if the error in program execution is the result of timing 

2 errors or other types of errors which only occur when the program 

3 is running at real time speed. As used herein, the term "real 

4 time" means the rate at which a- program must execute in order to 

5 process the incoming data rate which may be quite high. 
6 

7 a widely used technique for debugging a program which is 

8 running in real time is called "tracing". Tracing involves 

9 recording the transactions performed by the computer as it 

(tP executes the program code. The trace of activities performed by 

ifl the computer during the time of a failure can be a useful guide in 

|V2 isolating possible causes of the failure. 

r4 Another useful debugging tool is to set breakpoints at 

jtj5 selected places in the program. The breakpoints trap the flow of 

jfp the software and provide insight into whether, when, and how 

[07 certain portions of the software are entered and exited. An 

1 8 analysis of the flow of the software can provide information which 

19 is useful in isolating bugs . 
20 

21 Many state-of-the-art tracing and trapping methods are 

22 accomplished by a debug support circuit which is connected to the 

23 system bus, i.e. the bus which couples the CPU to memory. See, 

24 for example, U.S. Patent Number 5,491,793 to Somasundaram et al. 
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1 entitled "Debug Support in a Processor Chip." Connecting a debug 

2 circuit to the system bus is convenient because addresses, 

3 instructions, and data can be accessed via the system bus. 

4 However, coupling the debug support circuit to the system bus 

5 increases the electrical load on the bus and interferes with the 

6 operation of the bus. Moreover, operation of the system bus may 

7 interfere with operation of the debug support circuit. In 

8 addition, the system bus may not provide all the information 

9 necessary for debugging a program running on a CPU which uses 
internal cache. These CPUs will not access the system bus if the 

=W information they need is available in cache. If an error occurs 

[y2 while the CPU is accessing internal cache, the debug support 

jfj3 circuit will not be able to access the information it needs. 

J=5 Another tracing and trapping method is disclosed in U.S. 
^ Patent Number 5,833,310 to Whistel et al. entitled "On-Chip In- 
ly Circuit-Emulator Memory Mapping and Breakpoint Register Modules . " 

18 According to this method, an internal bus controller is coupled to 

19 the memory address bus and a match register. When a memory 

20 address written to the address bus matches an address in the match 

21 register, a memory mapping module maps a memory cycle to an 

22 external debug memory. The user can set specific bus event 

23 conditions for which memory is mapped by writing to a set of 

24 breakpoint registers. A disadvantage of this method is that it 
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1 requires an additional set of i/o pins for the chip so that the 

2 external debug memory can be coupled to the chip. This may 

3 require a significant number of pins since the addresses to be 

4 mapped may be 32 or 64 bits wide. 
5 

6 Still another tracing and trapping method is disclosed in 

7 U.S. Patent Number 5,513,346 to Satagopan et al. entitled "Error 

8 Condition Detector for Handling Interrupt in Integrated Circuits 

9 Having Multiple Processors." According to this method, an 
W interrupt processor controller intercepts all interrupts and 

Ifll routes them to the appropriate processor in a multiprocessor chip. 

|;# The interrupt processor controller includes logic which determines 

ItP when an interrupt will cause an error because a previously 

1^ instigated interrupt has not been cleared. When such an error is 

1J detected, a bit is set in an error detect register, the bit 

1||> corresponding to an interprocessor interrupt channel. The bits in 

1-7 the register are ORed and a single bit output indicates the 

18 occurrence of an error. The register may then be examined to 

1 9 determine the location of the interrupt error in the executing 

20 code. This method does not interfere with the system bus and does 

21 not require very many additional pins on the chip. However, the 

22 debugging information that it provides is limited. 
23 
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1 The Motorola MPC-860 PowerQuicc™ includes a program 

2 development system interface port which provides a three bit 

3 output indicative of the state of the program execution as the 

4 program is being executed. The- MPC-860 is a 40 mHz communications 

5 controller but the development system interface port is only 

6 operable at a rate of 4 mHz. Thus, the port can not be used for 

7 real time debugging. The specifications for the MPC-860 are found 

8 in the "MPC-860 POWERQUICC USER'S MANUAL", Copyright 1996 • 

9 Motorola, Inc., Schauiriberg, IL, the complete disclosure of which 
ftp is incorporated herein by reference. 

Jft2 ASIC design using one or more embedded processors poses 

%3 additional debugging challenges. The prior art methods of 

t% trapping instructions at a given point in time implies that the 

Jhf) system must be stopped to allow debugging of firmware. Once the 

W6 system is stopped, however, real time events and their timing 

W relationships are lost. If there is a firmware bug which is only 

1 8 identifiable in the presence of live traffic (during real time 

19 operations) it is necessary to obtain contextual information about 

20 the error before the firmware is changed. 
21 

22 
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1 SUMMARY OF THE INVENTION 

2 

3 It is therefore an object of the invention to provide a 

4 debugging interface for tracing instructions without loss of real 

5 time context and event interaction. 
6 

7 It is also an object of the invention to provide a debugging 

8 interface which does not interfere with the operation of a- 

9 processor or system bus. 

1° 

;?1 It: is another object of the invention to provide a debugging 

l%2 interface which does not require many additional pins on a 

|1l3 processor chip. 
J4 

It is a further object of the invention to provide a 

jtJ6 debugging interface which provides access to a substantial amount 

rF7 of information about the executed instructions. 
18 

19 In accord with these objects which will be discussed in 

20 detail below, the debugging interface of the present invention 

21 includes a first decoder coupled to the sequencer of a processor 

22 and to the Instruction RAM (IRAM) of the processor. The first 

23 decoder, according to the invention, provides a real time three 

24 bit output on a cycle by cycle basis which is indicative of the 
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1 processor activity during the last clock cycle. According to a 

2 presently preferred embodiment, the three bit output indicates 

3 seven different conditions regarding processor activity. In 

4 particular, the three bit output indicates whether or not a new 

5 instruction has been executed since the last clock cycle, and if a 

6 new instruction has been executed, whether the last instruction 

7 executed by the processor was an immediate jump, a jump to 

8 register, or a branch taken. In addition, the three bit output 

9 will indicate whether execution of the instruction resulted in an 
flO exception. By recording this three bit output over time, and 

fOl comparing it to the actual instructions listed in the program 

jt!2 code, important debugging information is obtained about a program 

rtj3 which was running in real time. 

;f4 

'tj5 According to a preferred embodiment of the invention, a 

|tJ6 second decoder and an event history buffer are coupled to the 

jtf7 cause register of the sequencer of the processor. In particular, 

1 8 the second decoder is coupled to the enable input of the history 

1 9 buffer and the cause register is coupled to the data input of the 

20 history buffer. The second decoder decodes the contents of the 

21 cause register and enables the history buffer whenever the 

22 contents of the cause register indicates an exception, a jump 

23 register instruction, or a change in the status of an interrupt 

24 line. Whenever the history buffer is enabled, information from 
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1 the cause register and the program counter is loaded into the 

2 buffer. By recording the contents of the history buffer over 

3 time, and comparing the information to the actual program code, 

4 additional important debugging information is obtained about a 

5 program which was running in real time. According to this 

6 preferred embodiment of the invention, the seventh condition 

7 indicated by the three bit output of the first decoder is whether 

8 an exception was encountered without writing to the history 

9 buffer. 

1° 

jfll According to the presently preferred embodiment, each entry 

ffi2 in the event history buffer is forty- four bits. Each forty- four 

FU3 bit entry in the history buffer includes the current sixteen bit 

/I 4 time stamp, twenty three bits from certain fields of the cause 

ij5 register or program counter, one bit indicating whether the entry 

is related to a jump or an exception, two bits identifying the 

jtf7 processor number (in a multiprocessor system) , one bit identifying 

1 8 whether the history buffer has overflowed, and a time stamp 

19 rollover bit. The history buffer preferably has a depth of at 

20 least sixteen entries. 
21 

22 An exemplary implementation of the debugging interface is 

23 embodied on an ASIC chip having three processors. Each processor 

24 is provided with two decoders as described above and a single 



- 8 - 



TRA-040 



1 event history buffer is provided on the chip. Nine pins on the 

2 chip are used to provide access to the three bit outputs of each 

3 first decoder. Three pins on the chip provide serial access 

4 (data, clock, and enable) to the contents of the event history 

5 buffer. These twelve pins on the chip allow a diagnostic device 

6 to be coupled to the chip during real time operations without 

7 interfering with the operation of the chip. The outputs of the 

8 first decoders and the contents of the event history buffer can be 

9 recorded over time by the diagnostic device to provide a real time 
WjO record of the processing events occurring in the chip during real 
C 5 1 time. This real time record taken together with knowledge of the 
tf£ program code being executed provides a true picture of the 

jt|3 processors ' execution sequence in real time and thereby expedite 

14 debugging of code. 

}Pp Additional objects and advantages of the invention will 

Jlf7 become apparent to those skilled in the art upon reference to the 

1 8 detailed description taken in conjunction with the provided 

1 9 figures . 
20 

21 
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I BRIEF DESCRIPTION OF THE DRAWINGS 

2 

3 Figure 1 (represented as Figs. 1A and IB on two separate 

4 sheets) is a schematic block diagram of an exemplary 

5 implementation of a real time debugger interface according to the 

6 invention; and 
7 

8 Figure 2 is a schematic block diagram of a debugging system 

,9 coupled to a chip embodying a real time debugger interface 

1© according to the invention. 
"M 

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 

il 

Ijf- Referring now to Figures 1, an exemplary ASIC chip 10 

If incorporating a debugger interface according to the invention 

i°*t 

1j includes three processors 12a, 12b, 12c, sharing a common clock 16 

17 via a clock bus 17. Each processor includes an instruction RAM 

18 (IRAM) 18a, 18b, 18c, an arithmetic logic unit (ALU) 20a, 20b, 

19 20c, and a "sequencer" 22a, 22b, 22c. Each sequencer includes a 

20 program counter 24a, 24b, 24c and a cause register 26a, 26b, 26c. 

21 Each program counter contains an index of the instructions in an 

22 associated IRAM and a pointer to the index as the instructions are 

23 executed by the processor. The cause registers store current 

24 information about interrupts, exceptions, and other processor 

25 functions. 
26 
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According to one aspect of the invention, a first decoder 
28a, 28b, 28c is coupled to each IRAM 18a, 18b, 18c, and to each 
sequencer 22a, 22b, 22c, i.e., to each program counter and each 
cause register. Each first decoder has a three bit output 30a, 
30b, 30c which is available off the chip 10 via three pins (0, 1, 
2) in real time. 

As mentioned above, the three bit output of each first 
decoder 28 provides an indication of the processor activity during 
the last clock cycle. Thus, the decoder 28 is arranged to 
indicate whether the program counter has moved its pointer to a 
new instruction. The decoder also decodes the instruction in the 
IRAM to provide information about the instruction, and decodes the 
contents of the cause register to provide an indication of an 
exception encountered during the execution of an instruction. 
According to a presently preferred embodiment, the first decoder 
28 generates a three bit output which is interpreted as shown in 
Table 1, below. 
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Output 


Mnemonic 


Description 


000 


NC 


No Change 


001 


INC 


. Program Counter Increment 


010 


JI 


Program Counter Jump Immediate 


Oil 


JR 


Program Counter Jump Register 


100 


ECP 


Exception Encountered • 


101 


PBT 


Program Counter Branch Taken 


110 


RSD 


Reserved 


111 


ENH 


Exception Encountered, No History Buffer 
Entry Written 



; Table 1 

!? 

j4 The output 000 indicates that there has been no change in the 

13 processor since the last clock cycle; i.e., the processor has not 

5 processed a new instruction and the program counter pointer has 

6 not changed. The output 001 indicates that the processor has 

7 processed the next instruction in the program; i.e., the program 

8 counter pointer has incremented to the next instruction in the 

9 index. The output 010 indicates that the last instruction 
1 0 processed by the processor was a "hard coded" jump to an 

1 1 instruction; i.e., the instruction in I RAM pointed to by the 
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1 program counter includes code indicating that it is a jump 

2 instruction to an absolute address in the program. The output Oil 

3 indicates that the last instruction processed by the processor was 

4 a jump to an instruction based on the contents of a register; 

5 i.e., the instruction in I RAM pointed to by the program counter 

6 includes code indicating that it is a jump instruction to a 

7 location in the program determined by the value of a variable* 

8 The output 100 indicates that since the last clock cycle the 

9 processor has encountered an interrupt or an exception; i.e., the 
contents of the cause register contain code which indicates an 

#1 interrupt or exception. The output 101 indicates that the last 

d|2 instruction processed by the processor was a pc branch taken; 

fl|3 i.e., the instruction in I RAM pointed to by the program counter 

.1 4 includes code indicating that it is a branch back to another 

flj5 instruction. The output 110 is not presently used, but is 

jtj6 reserved for future use. The output 111 indicates that since the 

JtJT last clock cycle the processor has encountered an interrupt or an 

1 8 exception; and that no entry was made in the history buffer 
19 

20 The operation of the first decoder 28 and its output is 

21 illustrated with reference to a simple code listing which is shown 

22 below in Table 2. 
23 
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LINE NUMBER 


INSTRUCTION 


10 


Input A 


20 


B=5 


30 


C=2 


40 


D=B+C 


50 


lfD=7then Goto 70 _ 


60 


GotoA*10 


70 


B=4 


80 


Goto 30 


90 


End 



Table 2 



The listing in Table 2 has one "immediate" or "hard coded" 
jump instruction at line 80 and a conditional branch at line 50. 
It also has one jump instruction, line 60, based on the contents 
of a register, i.e. the value of A which is input at line 10. The 
three bit output of the first decoder during execution of the 
instructions shown in Table 2 is illustrated in Table 3 below 
where the values of variables A, B, C, and D are also shown. 
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Current 
Line 


Next 
Line 


A 


B 


C 


D 


Mnemonic 


Three Bit 
Output 


10 


20 


? 


7 


? 


? 


INC 


001 


20 


30 




5 


? 


■? 


INC 


001 


30 


40 


7 


5 


2 


■? 


INC 


001 


40 


50 


*p 


5 


2 


7 


INC 


001 


50 


70 


7 


5 


2 


7 


PBT 


101 


70 


80 


7 


4 


2 


7 


INC 


.101 


80 


30 


7 


4 


2 


7 


JI 


010 




a n 






o 
z 


/ 


INC 




40 


50 


7 


4 


2 


6 


INC 


001 


50 


60 




4 


2 


6 


INC 


001 


60 


7 


7 


4 


2 


6 


JR 


Oil 



Table 3 



When the first instructi on (listed in line 10) is executed; 
the first decoder indicates that a program counter increment (INC) 
in the execution of the program has occurred and shows an output 
of "001". As the program progresses from the instruction on line 
10 through the instruction on line 40, the first decoder continues 
to indicate that a program counter increment (INC) in the 
execution of the program has occurred and continues to show an 
output of "001". When the instruction on line 50 is executed, the 
first decoder indicates that a program counter branch taken (PBT) 
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has occurred and shows an output of "101". As seen in Tables 2 
and 3, the program branches to line 70 because the conditional 
expression of line 50 is true based on the variable D=7. Upon 
execution of line 70, the first- decoder indicates that a program 
counter increment (INC) in the execution of the program has 
occurred and shows an output of "001". When the instruction on 
line 80 is executed, the first decoder indicates that an immediate 
jimp (JI) has occurred and shows an output of "010". As seen in 
Tables 2 and 3, the program jumps to line 30, When the 
instructions on lines 30 and 40 are executed, the first decoder 
indicates that a program counter increment (INC) in the execution 
of the program has occurred and shows an output of "001". When 
line 50 is executed (now for the second time) the first decoder 
indicates that a program counter increment (INC) in the execution 
of the program has occurred and shows an output of "001" because 
the condition (D=7) for the jump in line 50 is no longer valid. 
Line 60 is now executed and a jump to a location stored in a 
register occurs* The first decoder therefore indicates a jump to 
register (JR) by showing an output of "011". 

Referring once again to Figure 1, according to another aspect 
of the invention, each cause register 26a, 26b, 26c is coupled to 
the data input D of an event history buffer 14 and a second 
decoder 32a, 32b, 32c is coupled to each cause register and to the 
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1 enable input E of the history buffer 14. The clock 16 provides 

2 the common clock signal to the clock input C of the history buffer 

3 14 via the clock bus 17, and a timestamp register 19 is also 

4 coupled to the clock bus 17. The contents of the history buffer 

5 14 are made available off chip by three pins for the data, clock, 

6 and enable (D, C, E) of the history buffer 14. According to this 

7 aspect of the invention, when certain conditions are detected by 

8 one of the second decoders 32, the history buffer is enabled via 

9 the appropriate decoder, and information from the cause register, 
$j0 the timestamp register, and the program counter is stored in the 
J|1 history buffer. More particularly, the second decoder 32 enables 
JC|2 the history buffer whenever the first decoder contains code which 
JO indicates that the processor is processing an instruction to jump 
1^4 to a location stored in a register, whenever the first decoder 
fl5 contains code indicating an exception was encountered, and 

WS whenever the first decoder contains code indicating a change in 

!P7 state of an interrupt line. 

1*8 

1 9 According to a presently preferred embodiment, when the 

20 history buffer is enabled, it captures forty-four bits of 

21 information from the cause register or program counter, and the 

22 timestamp register. The forty-four bits of information are 

23 preferably organized as illustrated in Table 4 below. 
24 
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43 


42 


41 


40 - 18 


17 


16 


15-0 


Mode 


Proc 


Cause /PC 


HOVRF 


TR 


Time Stamp 



1 

2 
3 
4 
5 
6 

I3 7 

IS 9 
!|° 

Vi 

m 

m 

15 
16 
17 
18 
19 
20 
21 



Table, 4 

The first bit, bit location 43, is a mode identifier 
indicating whether the entry being stored has program counter 
information or cause register information. A two bit processor 
identification number is stored in binary form at bit locations 
42, 41. This number is used to indicate which processor's 
information is being stored (in the case of a multiprocessor 
system) . The next twenty-three bits at bit locations 40 through 
18 are used to store cause register information or program counter 
information depending on the mode as explained above. If program 
counter information is being stored, the contents of the program 
counter are stored at bit locations 40 through 18. If cause 
register information is being stored, bit location 40 is used to 
indicate whether the exception occurred while the processor was 
executing an instruction in the branch delay slot. (This applies 
to pipelined processors such as RISC processors.) Bit locations 
39 through 35 are used to store processor related exception 
conditions. Bit locations 34 through 18 are used to store an 
indication of all pending interrupts (external, software, co- 
processor. The HOVRF field at bit location 17 is used to indicate 
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1 whether the internal event history buffer has overflowed. The TR 

2 bit 16 is used to indicate a times tamp rollover and bits 15 

3 through 0 are used to store a sixteen bit timestamp. According to 

4 the presently preferred embodiment, the forty-four bits captured 

5 in the history buffer 14 are serially output on data pin D over 

6 forty-four clock cycles (bit serial output) . 
7 

8 As mentioned above, the event history buffer records - 

9 information when an event (either an unmasked exception or a PC 
13) jump register instruction) has occurred. According to a presently 
fjl preferred embodiment, this requires an additional mask register 
W. per cause register and a free running timestamp counter. The 

f|S event masks are provided by a JTAG test register load instruction 

V4 in the static debug interface. When the cause register bits 

1J corresponding to an exception are unmasked or a PC jump register 

IS instruction is encountered, an entry is made in the history 

W buffer. 

18 

1 9 Those skilled in the art will appreciate that the outputs of 

20 the first decoder 28 and the contents of the history buffer 14 

21 provide a relatively complete indication of each processor's 

22 execution sequence in real time, particularly when viewed in light 

23 of the actual program code which is being executed. Therefore, 
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1 according to the invention, a debugging system may be coupled to 

2 the first decoders and history buffer as illustrated in Figure 2. 
3 

4 Turning now to Figure 2, the outputs 30a, 30b, 30c of the 

5 first decoders and the D,C,E terminals of the history buffer are 

6 coupled to a debugging computer 44 which preferably has a copy of 

7 the program code stored therein. The three-bit outputs 30a, 30b, 

8 30c of the first decoders and the D,C,E terminals of the history 

9 buffer are preferably coupled to an interface buffer 40 which is 
13p coupled by a serial, parallel, or network connection 42 to the 
1fll debugging computer 44. The interface buffer 40 is a rate 

Wt decoupling buffer. In a present embodiment of the invention, the 

W debugger interface is provided on a 100 MHz three processor 

14 system. In that system, the data rate for reading the event 

If history buffer is approximately 1 gigabit/sec. Current PCs cannot 

^jj keep up with that data rate. Therefore, the buffer 40 is provided 

tf to prevent the loss of event history data. 

1 8 

1 9 As the program is running on the ASIC 10, the debugging 

20 computer 44 collects information from the first decoders and the 

21 history buffer. The information collected by the computer 44 is 

2 2 associated with each line of code being executed by the ASIC by 
2 3 stepping through the copy of the code which is stored in the 

24 computer 44. When a bug is encountered, the complete history of 



- 20 - 



TRA-040 

1 instruction execution leading up to the failure can be reviewed 

2 with the computer 44. The debugging system is non-invasive and 

3 permits debugging of programs operating in real time. 
4 

5 There have been described and illustrated herein embodiments 

6 of a real time debugger interface for embedded systems. While 

7 particular embodiments of the invention have been described, it is 

8 not intended that the invention be limited thereto, as* it is 

9 intended that the invention be as broad in scope as the art will 
IjO allow and that the specification be read likewise. Thus, while 
itH particular encoding schemes have been disclosed with reference to 

the first decoder output and the history buffer contents, it will 
rtp be appreciated that other encoding schemes could be utilized 
T4 provided that they achieve substantially the same results as 
W described herein. Also, while the invention has been illustrated 

with reference to a three -process or ASIC chip, it will be 
jM7 recognized that the invention may be applied in other types of 
18 chips having greater or fewer processors. Moreover, while 

particular configurations have been disclosed in reference to the 
indications provided by the first decoders, it will be appreciated 

21 that other configurations could be used as well, provided that 

22 they achieve substantially the same results as described herein. 

23 It will therefore be appreciated by those skilled in the art that 



19 

20 
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yet other modifications could be made to the provided invention 
without deviating from its spirit and scope as so claimed. 
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